Credentials Required

Required Credentials

Before beginning the installation, ensure you have the following credentials available:

Credential	Source	Required
AWS IAM Credentials	Provided by Manifest Cyber during onboarding	Required
NVD API Token	Request from NIST NVD	Required
OIDC Client Credentials	Your identity provider (Microsoft, Keycloak, Google, etc.)	Recommended
SMTP Server Credentials	Your email provider (basic authentication or XOAUTH)	Optional

AWS IAM Credentials

These credentials are provided by Manifest Cyber during the onboarding process. They grant access to Manifest's private container registry (Amazon ECR), which manifest-installer pulls the platform packages from.

You will provide them to manifest-installer on the host — either persisted with manifest-installer config set, or exported as environment variables. The Installation Guide covers both options.

NVD API Token

The NVD (National Vulnerability Database) API token is required for vulnerability data synchronization in internet-connected installs. You can request a free API key from NIST NVD. In air-gapped deployments, vulnerability data is imported from the bundle instead.

OIDC Client Credentials (Optional)

Manifest Self-Hosted uses OIDC for authentication. You will need to configure an OIDC application with your identity provider and obtain:

Client ID
Client Secret
Issuer URL

If you do not have an existing identity provider, Manifest can deploy a Keycloak instance automatically.

See the Configuration Reference for detailed OIDC setup instructions.

SMTP Server Credentials (Optional)

If you want to enable email notifications, you will need SMTP server credentials. Both basic authentication and XOAUTH are supported.

AI Risk Product Credentials

If you are subscribed to the AI Risk product, you will additionally require tokens for the following services:

Hugging Face
OpenAI API

Next Steps

Once you have gathered all required credentials, proceed to the Installation Guide.